CVE-2026-5760: Lmsys Sglang

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

SGLang's reranking endpoint (/v1/rerank) achieves Remote Code Execution (RCE) when a model file containing a malcious tokenizer.chat_template is loaded, as the Jinja2 chat templates are rendered using an unsandboxed jinja2.Environment().

Affected products

• Lmsys Sglang: before 0.5.11 (fixed in 0.5.11)

Published 2026-04-20. Last modified 2026-06-17.